70mai M300 安全漏洞

70mai M300 is a smart logger from 70mai 70mai, a Chinese company. A security vulnerability exists in 70mai M300 20250611 and prior versions, which stems from insufficient credential protection...

PT-2025-26649

Name of the Vulnerable Software and Affected Versions: 70mai M300 versions up to 20250611 Description: A problematic issue has been found in the HTTP Server component, leading to insufficiently protected credentials. The attack can only be done within the local network and has a high complexity,...

PT-2025-26652

Name of the Vulnerable Software and Affected Versions: 70mai M300 up to 20250611 Description: A critical issue was found in the Telnet Service component, allowing the use of default credentials. The attack must be initiated within the local network. The exploit has been disclosed to the public an...

70mai M300 安全漏洞

70mai M300 is a smart logger from 70mai 70mai, a Chinese company. A security vulnerability exists in 70mai M300 20250611 and prior versions that stems from the use of default credentials...

70mai M300 授权问题漏洞

70mai M300 is a smart recorder from 70mai 70mai, a Chinese company. An authorization issue vulnerability exists in 70mai M300 20250611 and prior versions, which stems from improper authentication due to incorrect operation of file /livestream/12...

PT-2025-26651

Name of the Vulnerable Software and Affected Versions: 70mai M300 up to 20250611 Description: A vulnerability has been found in the RTSP Live Video Stream Endpoint of the 70mai M300, affecting an unknown functionality of the file /livestream/12. This leads to improper authentication. The attack...

70mai M300 安全漏洞

70mai M300 is a smart recorder from 70mai 70mai, a Chinese company. A security vulnerability exists in 70mai M300 20250611 and prior versions that stems from improper access control...

PT-2025-26653

Name of the Vulnerable Software and Affected Versions: 70mai M300 up to 20250611 Description: A vulnerability was found in the Telnet Service component, affecting an unknown part of the file demo.sh. The manipulation leads to denial of service. Access to the local network is required for this...

70mai M300 安全漏洞

70mai M300 is a smart logger from 70mai 70mai, a Chinese company. A security vulnerability exists in 70mai M300 20250611 and earlier versions, which stems from a denial of service due to incorrect operation of the file demo.sh...

CVE-2023-46295

An issue was discovered in Teledyne FLIR M300 2.00-19. Unauthenticated remote code execution can occur in the web server. An attacker can exploit this by sending a POST request to the vulnerable PHP page. An attacker can elevate to root permissions with Sudo...

PT-2025-31839

Name of the Vulnerable Software and Affected Versions: Shenzhen Aitemi M300 Wi-Fi Repeater hardware model MT02 Description: An unauthenticated OS command injection vulnerability exists in the device. When configuring the device in Extender mode via its captive portal, the extap2g SSID field is...

CVE-2023-46294

An issue was discovered in Teledyne FLIR M300 2.00-19. User account passwords are encrypted locally, and can be decrypted to cleartext passwords using the utility umSetup. This utility requires root permissions to execute...

CVE-2023-46294

An issue was discovered in Teledyne FLIR M300 2.00-19. User account passwords are encrypted locally, and can be decrypted to cleartext passwords using the utility umSetup. This utility requires root permissions to execute...

CVE-2023-46295

CVE-2023-46295 affects Teledyne FLIR M300 firmware up to version 2.00-19. The issue is in the web server: unauthenticated remote code execution can be triggered by sending a POST request to a vulnerable PHP page, with the potential to escalate to root via Sudo. Public sources confirm the vulnerab...

Teledyne FLIR M300 安全漏洞

The Teledyne FLIR M300 is a camera surveillance device from Teledyne FLIR, USA. A security vulnerability exists in Teledyne FLIR M300 version 2.00-19, which originates from a user account password that is locally encrypted and can be decrypted into plaintext using a utility program...

CVE-2023-46295

An issue was discovered in Teledyne FLIR M300 2.00-19. Unauthenticated remote code execution can occur in the web server. An attacker can exploit this by sending a POST request to the vulnerable PHP page. An attacker can elevate to root permissions with Sudo...

CVE-2023-46295

An issue was discovered in Teledyne FLIR M300 2.00-19. Unauthenticated remote code execution can occur in the web server. An attacker can exploit this by sending a POST request to the vulnerable PHP page. An attacker can elevate to root permissions with Sudo...

CVE-2023-46294

An issue was discovered in Teledyne FLIR M300 2.00-19. User account passwords are encrypted locally, and can be decrypted to cleartext passwords using the utility umSetup. This utility requires root permissions to execute...

PT-2024-13348 · Teledyne Flir · Teledyne Flir M300

Name of the Vulnerable Software and Affected Versions: Teledyne FLIR M300 versions 2.00 through 2.00-19 Description: An issue was discovered where user account passwords are encrypted locally and can be decrypted to cleartext passwords using the umSetup utility, which requires root permissions to...

Teledyne FLIR M300 安全漏洞

Teledyne FLIR M300 is a camera surveillance device from Teledyne FLIR, Inc. A security vulnerability exists in Teledyne FLIR M300 version 2.00-19, which stems from the possibility of unauthenticated remote code execution...